org.beangle.security.realm.ldap.SimpleLdapUserStore.scala Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of beangle-security Show documentation
The Beangle Data Library
The newest version!
/*
 * Copyright (C) 2005, The Beangle Software.
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as published
 * by the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.See the
 * GNU Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with this program.  If not, see .
 */

package org.beangle.security.realm.ldap

import org.beangle.commons.collection.Collections
import org.beangle.commons.lang.Strings
import org.beangle.commons.logging.Logging
import org.beangle.security.authc.{Account, DefaultAccount}
import org.beangle.security.realm.ldap.LdapUserStore.*

import javax.naming.directory.{BasicAttributes, DirContext, SearchControls}
import javax.naming.{CompositeName, NamingException}
import scala.collection.mutable

class SimpleLdapUserStore(contextSource: ContextSource, base: String) extends LdapUserStore with Logging {

  var uidName = "uid"

  override def getUserDN(uid: String): Option[String] = {
    val ctx = contextSource.get()
    var result: String = null
    val condition = Strings.concat(uidName, "=", uid)
    try {
      val attrList = Array(uidName)
      val constraints = new SearchControls()
      constraints.setSearchScope(2)
      constraints.setReturningAttributes(attrList)
      //this must be false
      //@see http://stackoverflow.com/questions/11955041/why-doesnt-dircontext-close-return-the-ldap-connection-to-the-pool
      constraints.setReturningObjFlag(false)
      var results = ctx.search(base, condition, constraints)
      if (results.hasMore) {
        val si = results.next()
        result = Strings.concat(si.getName, ",", base)
      }
      results.close()
      results = null
    } catch {
      case e: Throwable => logger.error("Ldap search error,uid=" + uid, e)
    } finally {
      contextSource.release(ctx)
    }
    Option(result)
  }

  override def getAttribute(userDN: String, attrName: String): Option[Any] = {
    getAttributes(userDN, attrName).get(attrName)
  }

  override def getAttributes(userDN: String, attributeNames: String*): collection.Map[String, Any] = {
    val result = Collections.newMap[String, mutable.Buffer[Any]]
    val ctx = contextSource.get()
    try {
      val userID = new CompositeName(userDN)
      val attrs =
        if (attributeNames.nonEmpty) ctx.getAttributes(userID, attributeNames.toArray)
        else ctx.getAttributes(userID)
      val attrEnum = attrs.getAll
      while (attrEnum.hasMoreElements) {
        val attr = attrEnum.nextElement
        val values = result.getOrElseUpdate(attr.getID, new collection.mutable.ArrayBuffer[Any])
        values += attr.get()
      }
    } catch {
      case e: NamingException => e.printStackTrace()
    } finally {
      contextSource.release(ctx)
    }
    result.map(e => (e._1, if (e._2.size == 1) e._2.head else e._2))
  }

  override def updateAttribute(userDN: String, attribute: String, value: AnyRef): Unit = {
    val ctx = contextSource.get()
    try {
      val userID = new CompositeName(userDN)
      val attrs = new BasicAttributes
      attrs.put(attribute, value)
      val action = if (null == value) DirContext.REMOVE_ATTRIBUTE else DirContext.REPLACE_ATTRIBUTE
      ctx.modifyAttributes(userID, action, attrs)
    } catch {
      case e: NamingException => e.printStackTrace()
    } finally {
      contextSource.release(ctx)
    }
  }

  override def load(principal: Any): Option[Account] = {
    getUserDN(principal.toString).map { dn =>
      val account = new DefaultAccount(principal.toString, dn)
      val active = getAttribute(dn, UserStatus).forall(s => LdapUserStore.isActive(s.toString))
      account.accountExpired = !active
      account
    }
  }

  def create(user: Account, password: String): Unit = {
    val attrs = new BasicAttributes()
    attrs.put("cn", user.description)
    attrs.put("sn", user.description)
    attrs.put(uidName, user.name)
    attrs.put(UserPassword, password.getBytes)
  }
}